Identity & Access Management (IAM) Analyst - Hybrid (Dallas/Houston)

Identity & Access Management (IAM) Analyst - Hybrid (Dallas/Houston)

AECOM is seeking an Identity and Access Management (IAM) Analyst to join our Global Security Team. This role will play a critical part in advancing our Identity and Access Management and Zero Trust Identity Program by ensuring secure and efficient identity and access management practices. The successful candidate will assist with daily operational tasks, Privilege Access Management tasks, application onboarding using SCIM or Saviynt solutions, and contribute to the overall security posture of the organization.

This position will offer flexibility for hybrid work schedules including both in-office presence and telecommute/virtual work, to be based in either Dallas or Houston, TX.

Major Tasks and Responsibilities

• Identity Lifecycle Management: Manage user, group, and system objects through their lifecycle, including provisioning, updates, deactivation, and deletion, in alignment with established processes and policies.
• Privilege Access Management: Assist with privileged credential management, access controls following a least privilege model or JIT access implementation. Ensure continuous revalidation or access through access control reviews.
• Application Onboarding: Support the onboarding of applications to the IAM platform using SCIM or Saviynt solutions, ensuring seamless integration and compliance with security standards.
• Zero Trust: Collaborate with the Global Security Team to implement and maintain Zero Trust principles within the IAM framework, focusing on least privilege access and continuous verification.
• Documentation and Standards: Develop, document, and communicate Identity and Access Management standards, processes, procedures, workflows, and associated metrics.
• Monitoring and Resiliency: Ensure IAM services are closely monitored for availability, resiliency, and compliance with organizational policies.
• Incident Response: Recognition of security events and threats via correlation of Security event ID's using analytics.
• IAM Initiatives: Support and contribute to Identity and Access Management-related projects and initiatives, including system upgrades, process improvements, and technology evaluations.

Qualifications

Minimum Requirements:

• BA/BS plus at least 6 years of relevant IT experience or demonstrated equivalency of experience and/or education
• At least 3 years of IAM specific work experience
• Proficiency in Active Directory and Azure AD/Entra security provisioning, administration, and configuration including Conditional Access Controls.
• Knowledge of privileged access management and identity governance.
• Problem-solving skills to troubleshoot and resolve IAM-related issues efficiently.
• Familiarity with IAM automation and scripting for process optimization.

Preferred Qualifications

• Experience with Saviynt or similar identity governance solutions for application onboarding and lifecycle management.
• Knowledge of CyberArk or similar Privilege Access Management tools
• Ability to recognize and analyze security events and threats using analytics and correlation of security event IDs.
• Knowledge of Zero Trust principles and their application in identity and access management.
• Ability to document and present technical processes and workflows clearly and concisely.
• Excellent organizational skills with the ability to prioritize tasks and meet deadlines.
• Excellent English written and verbal communication skills and ability to interact seamlessly with various levels of the organization
• Attention to Detail: Ensure accuracy and compliance in all IAM processes and documentation.
• A proactive mindset to identify opportunities for improvement and take initiative to implement solutions.

Additional Information

• Relocation assistance is not available for this position
• Sponsorship is not available for this position now or in the future

At AECOM, we are committed to maintaining a secure and trustworthy recruitment process and take any fraudulent hiring activity seriously. To support this commitment, all newly hired employees are required to attend an in-person Day 1 onboarding at an AECOM office location as a condition of employment.